Privacy Policy
Applies to: iPhone & iPad
Effective date: April 10, 2026
1. Data controller
Your privacy matters. These privacy notices explain what data is processed when you download and use No Spoiler MMA, how it is used, and what rights you have.
2. Principles of data processing
Data is processed in accordance with the EU General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG), and the Telecommunications Digital Services Data Protection Act (TDDDG). The app and this website process personal data only for the purposes described in this notice; optional features and third-party providers are described separately.
Legal bases (Art. 6 GDPR)
- Art. 6(1)(a) - Consent
- Art. 6(1)(b) - Performance of a contract
- Art. 6(1)(f) - Legitimate interests
3. Website hosting & technical infrastructure
Cloudflare (hosting)
Cloudflare, Inc. · Hosting and infrastructure provider
When accessing this website, Cloudflare as hosting and infrastructure provider processes technical connection data such as IP address, browser type, operating system, time of access, and requested content to the extent necessary to deliver, keep stable, and secure the website. Legal basis: Art. 6(1)(f) GDPR. Cloudflare.
Locally hosted stylesheet
Served directly from wehlflix.com via Cloudflare Pages
This website delivers its stylesheet as a local file from the same domain (/styles.css). No additional styling request to a third-party CDN is made when you open the page. Legal basis: Art. 6(1)(f) GDPR.
4. Data processing in the app
App Store download
When downloading the app from the Apple App Store, data such as Apple ID, download time, and device information is transmitted to Apple Inc. I have no influence over this. Apple.
Premium purchases & restore
Premium is offered as a one-time purchase without a subscription. If you buy Premium or restore a previous purchase, the transaction is handled directly through Apple StoreKit and the Apple App Store. Apple processes your Apple ID together with transaction and purchase information. I do not receive separate payment details such as credit card information.
Local data storage
Settings and local content saved by you, such as spoiler preferences, favorites, reminder state, and custom fight cards, are stored on your device. These items are not transmitted to my servers.
No user accounts
The app does not require registration or the creation of separate user accounts. Technical connection data may still be processed when remote event data is loaded or integrated advertising services are active.
Support requests by email
If you contact me by email, I process your message, sender address, timestamps, and any details or attachments you include voluntarily, such as the event name, time zone, device, or screenshots, solely to handle the request.
External event data requests
When current event and fight card data is loaded, the app connects to the developer-operated No Spoiler MMA edge API, which securely proxies BALLDONTLIE MMA. Technical connection data such as IP address and device-related HTTP metadata may be processed both by the No Spoiler MMA endpoint and the upstream data provider.
Time zone handling
The app reads the device's current time zone automatically from iOS (TimeZone.current) to display time-zone conversions. This happens entirely on your device. No location data is requested.
Event reminders
You can enable local iOS notifications for existing events. Reminder-related information is stored on your device. No remote push notifications are sent from my servers.
Calendar export
If you choose to save an event to your calendar, the app requests calendar access only when that feature is used. The access is used only to store the event entry you selected on your device.
5. App permissions
The app requests the following device access:
| Permission | Purpose |
|---|---|
| Local iOS notifications | Local iOS notifications for event reminders. Consent is granted via the iOS system prompt. Legal basis: Art. 6(1)(a) GDPR. |
| Calendar | Saving selected events to your calendar after explicit permission. Access is used only for the calendar entry you trigger. Legal basis: Art. 6(1)(a) GDPR. |
| App Tracking Transparency (ATT) | When ads are active for non-premium users, the app requests Apple's ATT permission before Google AdMob starts. A Google consent dialog may also appear when required for your region. |
Time zone: Provided automatically by iOS without any permission. No location data is collected.
You can disable local reminder notifications at any time under Settings → Notifications → No Spoiler MMA.
6. Third parties & SDKs
External event data sources
For current event and fight card data, the app uses the developer-operated No Spoiler MMA edge API, which securely proxies BALLDONTLIE MMA. Technical connection data may therefore be processed by both the No Spoiler MMA endpoint and the upstream data provider. Legal basis: Art. 6(1)(b) and Art. 6(1)(f) GDPR.
Advertising & consent – Google UMP / Google AdMob
If ads are active, the app uses Google's consent SDK UMP together with the advertising service Google AdMob provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Depending on region, consent status, and the final ad configuration, identifiers, coarse location, diagnostics, advertising data, product interaction, IP address, device information, consent state, ad requests, and ad interactions may be transmitted to Google and processed there.
Purpose: collecting and managing ad consent and displaying ads within the app.
Legal basis: where legally required, processing is based on your consent pursuant to Art. 6(1)(a) GDPR. Otherwise, processing only occurs within the scope of the technically integrated advertising services and your iOS settings.
Withdrawal: if available for your country, you can manage ad choices in the app under More → Ads & Privacy. App permissions can be changed in iOS Settings for No Spoiler MMA.
Google Ireland Limited may transfer data to Google LLC servers in the USA. Google LLC states that it is certified under the EU-U.S. Data Privacy Framework. Google.
Based on the app's current functionality, neither the app nor the integrated SDKs processes special categories of personal data such as health data, precise location, financial information, political opinions, religious beliefs, or biometric data.
7. Data retention
All data stored locally on your device, such as settings, favorites, reminder state, and custom fight cards, is retained until you change it, remove it, or uninstall the app. Such local content is not stored permanently on my own servers.
Data processed by Google AdMob is retained by Google Ireland Limited according to their own retention policy. Google.
8. Your rights & data deletion
You have the following rights regarding your personal data: access, rectification, erasure, restriction, data portability, objection, withdrawal of consent, and the right to lodge a complaint with a supervisory authority.
How to delete your data
Since No Spoiler MMA stores local content on your device, you can delete all locally stored data completely by uninstalling the app. Depending on the feature, you can also remove local content such as favorites, reminders, or custom fight cards directly in the app. Data processed by third-party providers is subject to their own policies.
You have the right to lodge a complaint with a competent data protection supervisory authority, in particular the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg or the supervisory authority of your usual place of residence within the EU. Baden-Württemberg.
9. Children's privacy
No Spoiler MMA is not specifically directed at children or teenagers. I do not knowingly collect personal data from persons under 13 years of age (under COPPA, USA) or under 16 years of age (under Art. 8 GDPR). If I become aware that a child under 13 has submitted personal data, I will delete it immediately.
10. California privacy rights (CCPA)
For users in California, the California Consumer Privacy Act (CCPA/CPRA) also applies. California consumers have the right to know what personal data is collected about them, the right to deletion, and the right to opt out of the sale or sharing of personal data.
To my understanding, No Spoiler MMA does not sell personal data. The use of advertising identifiers by Google AdMob may qualify as sharing under CPRA.
- If available: More → Ads & Privacy in the app
- iOS: Settings → Privacy & Security → Tracking
All other CCPA/CPRA rights can be exercised by email to MichaelWehle@proton.me.
11. Changes to this policy
I reserve the right to update this Privacy Policy when the app or applicable law changes. The current version is available at wehlflix.com/privacy.html.
Data Protection Officer: No Data Protection Officer has been appointed because the statutory requirements of Art. 37 GDPR are not met.
12. Contact
Michael Wehle
Email: MichaelWehle@proton.me